system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request...
7.5CVSS6.6AI score0.0242EPSS
SaveExploits1References3
Cvelist•added 2009/07/21 5:0 p.m.•17 views
CVE-2009-2558
system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request...